titan-iac/services/hermes/ariadne-handoff-rbac.yaml

31 lines
617 B
YAML

# services/hermes/ariadne-handoff-rbac.yaml
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
name: ariadne-gpu-handoff
namespace: hermes
rules:
- apiGroups: ["coordination.k8s.io"]
resources:
- leases
resourceNames:
- titan-24-gpu-owner
verbs:
- get
- patch
- update
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
name: ariadne-gpu-handoff
namespace: hermes
subjects:
- kind: ServiceAccount
name: ariadne
namespace: maintenance
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
name: ariadne-gpu-handoff